October 2021 Summaries

Stream Security is a comprehensive cloud security platform designed to enhance agile and real-time security operations without relying on traditional agents. As cloud environments become more complex, traditional security measures such as periodic scans and static rules often fail to address emerging threats effectively. Stream Security addresses this challenge by offering real-time visibility, change impact analysis, and advanced threat detection, allowing organizations to respond swiftly to vulnerabilities. Utilizing dynamic graph algorithms, the platform provides a more scalable and effective Cloud Security Posture Management (CSPM) strategy, reducing false positives and negatives. It also employs machine learning to detect and correlate suspicious activities, while its posture-based policies enable the establishment of guardrails that protect cloud infrastructure. Stream Security's capabilities make it a valuable tool for organizations seeking to maintain secure and compliant cloud infrastructures in an ever-evolving digital landscape.

HashiCorp's Terraform Cloud has introduced the run tasks feature, now integrated with Stream Security's continuous simulation platform, enabling organizations to incorporate third-party tools within a Terraform run between the plan and apply stages. This integration allows users to simulate proposed changes to their cloud environment in real-time, thereby assessing the impact of Terraform code before deployment and reducing the risk of mistakes and misconfigurations in production environments. The feature is particularly beneficial for analyzing changes to security group rules or IAM policy statements, helping to prevent unintended access or loss of resource reachability. Stream Security's simulation ensures proposed changes meet original requirements and prevents misconfigurations from affecting live environments. Current HashiCorp Terraform Cloud Business tier customers have access to the run tasks feature, and others can gain access by upgrading their subscription.